lately we are noticing that some messages are missing correctly forwarded to graylog. They are missing only in the first hours, then after we can correctly see them. It is not a definite time it changes from the times.
I read what I was able to find on the community, the time of server, graylog server and user in graylog are all the same. The message does not contain timestamps in date format, in fact the arrival time is correctly taken for those that work.
Do you know if I can do something?
Thanks in advance to everyone.